System and Method for Physically Detecting, Identifying, Diagnosing and Geolocating Electronic Devices Connectable to a Network

ABSTRACT

An emissions detection apparatus for at least one of detecting, identifying, diagnosing and geolocating an electronic device or an information transmitted from the electronic device includes an emissions collections device connected to an antenna receiving emission of an electromagnetic energy emitted from the electronic device and collecting a spectral data emitted from the electronic device; one or more algorithms processing the collected spectral data, algorithms selected from a group consisting of a peak detection algorithm, a multiple peak detection algorithm, a harmonic correlation algorithm, a non-harmonic correlation algorithm, a time correlation algorithm, a phase correlation algorithm, and a duty cycle timing correlation algorithm; and one or more algorithms matching the processed spectral data to an emissions template, wherein a match of the processed spectral data with the emissions template at least one of detects, identifies, diagnoses and geolocates the electronic device or the information transmitted from the electronic device.

CROSS REFERENCE TO RELATED APPLICATION

This patent application is a Continuation of U.S. patent applicationSer. No. 13/344,717 filed Jan. 6, 2012 pending. This patent applicationis related to and claims priority from U.S. Provisional PatentApplication Ser. No. 61/460,676 filed Jan. 6, 2011 and beingincorporated into this document by reference thereto.

STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH AND DEVELOPMENT

N/A

REFERENCE TO SEQUENCE LISTING, A TABLE, OR A COMPUTER PROGRAM LISTINGCOMPACT DISC APPENDIX

N/A

FIELD OF THE INVENTION

The present invention relates, in general, to a system and method fordetecting, identifying, diagnosing and geolocating electronic devicesthat are connected to a network through the use of data collectedrelating to the device via the network and, more particularly, thisinvention relates to a method of and a system for identifying not onlythe device connected to the network, but also devices located in theimmediate vicinity of the device that is connected to the network usingthe intended or unintended emissions given off by the described devices.

BACKGROUND OF THE INVENTION

As is generally known, it is often necessary to physically detect,identify and geolocate devices and/or users of such devices or performdiagnostics on the devices. Of a particular interest are electronicdevices connected to a network. In one example, product sales andmarketing organizations rely on the internet for tracking interests ofthe user in order to select specific group of users for targetedmarketing campaigns so as to maximize profits. In another example,product manufactures use networks to assure timing, coordination andstatus of all the machines and robots necessary to manufacture productson a manufacturing line. In yet another example, law enforcement relieson the information sent over the network so as to detect illegalactivities and facilitate termination of such illegal activities.

The electronic device can be connected to the network using a largenumber of technologies and approaches that include hard wiring,wireless, infrared and optical means as examples. Due to the nature ofnetwork connections and communications, the electronic device willprovide specific information regarding itself that is transmitted overthe network to other devices on the network. Some of this information isintended to be transmitted and some of it is unintentionally transmittedover the network. A well known example of intended information that issent over the network, such as Internet, is an Internet Protocol (IP)address for internet communications or a password to access an accounton an organizations intranet. Nonetheless, significant information istransmitted from the device over the network during any informationtransfer over a network. In some applications this media has beenreferred to as cyberspace. For instance the device may not only sendout, as noted above, the IP address and passwords that identify the userof the device, but also send out other identifying information about thedevice that is attached to the network that can be used to differentiatethe individual device from other devices connected to the network.Examples of general information that is sent includes, but is notlimited to connection speeds, modem speeds, fonts, clock speeds,processor speeds, device types, hardware configurations, softwareconfigurations and in the case of wireless devices the frequency oftransmission of the device or computer that are intentionally sentacross cyberspace. Furthermore, there are specific sets of commandedinformation that can be sent such as passwords, status, softwareconfigurations, health of systems present and user identifiers of manykinds. In addition to intended information, there is significantunintended information being transmitted over the network that is notintended to be sent across the connection but that is inevitably sent.

Furthermore, any physical electrical or electronic device that ispowered will give off unintended emissions. Specifications, such as FCCPart 15, FCC Part 18CISPR 11, CISPR 14-1, CISPR 22, ICES-003 andMIL-STD-461 are intended to govern the amount of unintended emissionsthat are given off by a commercially sold device to prevent device todevice Electromagnetic Interference (EMI) and assure ElectromagneticCompatibility (EMC). Nonetheless, even devices that meet the statutoryrequirements give off unintended emissions. Each and every physicalcomponent that makes up an electronic device contributes directly orindirectly to the characteristics of the unintended emissions that aregiven off by the electrical or electronic device.

However, prior to conceptualization and design of the instant invention,difficulties exist in physically locating devices connected to thenetwork, particularly by way of a wireless connection or by way of amasked hardwired connection. Further difficulties exist and, to the bestof Applicant's knowledge, no other methods are available for identifyingother electronic devices located in a proximity to the device connectedto the network. Additional difficulties exist in locating devices thathave been previously connected to the network.

Therefore, there is a need for an improved system and method fordetecting, identifying, diagnosing and geolocating electronic devicesthat are connected or have been connected to a network and electronicdevices that are located in proximity to the device connected to thenetwork.

SUMMARY OF THE INVENTION

The present invention provides an apparatus and method of detecting,locating, and geolocating electronic devices, that have at one time beenconnected to a network. This invention includes an emission detectionapparatus and a means for collecting information on a network aboutdevices that are connected to the network. The network informationcollection component could be any network collection means known in theart, for example data mining, directly transmitted informationcollection, digital fingerprinting, deep packet inspection, cookies,tracking software and indirectly transmitted information collectioncould be employed.

In one embodiment, the invention is specifically configured to providemarketing information for targeted electronics to understand the user'sproduct preferences.

In the case of electronic device status monitoring, network sent datacan provide status monitoring of the health of equipment andelectronics. The invention directly uses this information as networkcollected data to enhance status monitoring of systems and healthmonitoring of systems as well as provides a mechanism to predict thehealth of the electronics that make up a system.

OBJECTS OF THE INVENTION

It is, therefore, one of the primary objects of the present invention toprovide a system that uses data derived from a network for locatingelectronic devices.

Another object of the present invention is to provide a system forproviding diagnostics of the electronic device that is identified usingdata derived from a network the electronic device is connected to.

Still another object of the present invention is to provide a system foridentifying by make, model and other distinguishing features theelectronic device that is identified using data derived from a networkthe electronic device is connected to.

Still another object of the present invention is to provide a system forproviding the location on a map or other suitable medium usingidentified geospatial coordinate of the electronic device that isidentified using data derived from a network the electronic device isconnected to.

Still another object of the present invention is to provide a system forproviding the location of the electronic device inside a structure usingdata derived from a network the electronic device is connected to.

Still another object of the present invention is to provide a system foridentifying other electronic devices in the vicinity of the electronicdevice that was detected using data derived from a network theelectronic device is connected to.

Yet another object of the present invention is to provide device systemthat provides at least one of detection, identification, geolocation,and diagnostics of electronics in the vicinity of the electronic devicethat was detected using network data collection techniques.

Yet another object of the present invention is to provide system thatprovides at least one of detection, identification, geolocation, anddiagnostics of electronics and that further incorporates a database ofelectronic templates and signatures.

Yet another object of the present invention is to provide system thatprovides at least one of detection, identification, geolocation, anddiagnostics of electronics that further incorporates a database of allelectronics detected and that provides at least one of device detailedidentification, geolocation and relationship with other devices in thevicinity.

Yet another object of the present invention is to develop the databasefor sale to organizations for marketing purposes.

Yet another object of the present invention is to combine the data inthe database with other data collected online about the device todevelop a more robust database for sale for marketing purposes.

An additional object of the present invention is to provide a systemthat can be used to diagnose problems with devices connected to anetwork.

Another object of the present invention is to provide a system that canbe used to diagnose problems with subcomponents of the devices connectedto a network.

Yet another object of the present invention is to provide a system thatcan be used to diagnose problems with circuits that are contained insubcomponents of the devices connected to a network.

A further object of the present invention is to provide a system thatcan be used to diagnose problems with electronic parts that are part ofcircuits that are contained in subcomponents of the devices connected toa network.

Yet a further object of the present invention is to provide a systemthat can be used to diagnose problems with semi-conductor typeelectronic parts that are part of circuits that are contained insubcomponents of the devices connected to a network.

An additional object of the present invention is to provide a systemthat can be used to diagnose problems with devices connected to anetwork so that corrective action may be taken against those devicesusing the network that the device is connected to once the problem withthe electronic detected to the network is identified.

Another object of the present invention is to provide a system that canbe used for health monitoring of electronics that are connected to thenetwork.

Another object of the present invention is to provide a system forhealth monitoring of a device connected to the network that incorporatesboth self assessment of device health via network transmissions from thedevice as well as sensed health from the analysis of unintendedemissions given off by the same device.

Yet another object of the present invention is to provide a system thatcan be used for status monitoring of a network and at least one of realtime detection of anomalies and prediction of anomalies.

A further object of the present invention is to provide a system thatcan be used to verify that corrective action has been effectively takenagainst a device connected to the network.

Yet a further object of the present invention is to provide a systemthat uses multiple parallel algorithms to improve the confidence inidentifying the different emission characteristics of the specificelectronic device being detected.

An additional object of the present invention is to provide a systemthat uses at least one of multiple receivers and multiple networkcollection devices to improve the confidence in identifying theelectronics health status in a manufacturing environment.

Yet another object of the present invention is to provide a system usingRF emission detection device that is networked with other RF emissiondetection devices for enhanced measurement over a larger geographicalarea.

In addition to the various objects and advantages of the presentinvention described with some degree of specificity above it should beobvious that additional objects and advantages of the present inventionwill become more readily apparent to those persons who are skilled inthe relevant art from the following more detailed description of theinvention, particularly, when such description is taken in conjunctionwith the attached drawing figures and with the appended claims.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a schematic block diagram of a system for at least one ofdetecting, identifying, diagnosing anomalies in and geolocating at leastone device connectable to a network;

FIG. 2 is a schematic block diagram of the system of FIG. 1,particularly illustrating a plurality of manufacturing devices connectedto the network;

FIG. 3 is a schematic block diagram of the system of FIG. 1,particularly illustrating the apparatus for detecting emissions;

FIG. 4 is a schematic block diagram of the system of FIG. 1,particularly illustrating signature template construction of the atleast one device;

FIG. 5 is a flow chart of the method for at least one of detecting,identifying, diagnosing anomalies in and geolocating at least one deviceconnectable to a network; and

FIG. 6 is another flow chart of the method for at least one ofdetecting, identifying, diagnosing anomalies in and geolocating at leastone device connectable to a network.

DESCRIPTION OF THE VARIOUS EMBODIMENTS OF THE INVENTION

Prior to proceeding to the more detailed description of the presentinvention it should be noted that, for the sake of clarity andunderstanding, identical components which have identical functions havebeen identified with identical reference numerals throughout the severalviews illustrated in the drawing figures.

Now in reference to FIGS. 1-4, therein is illustrated a system,generally designated as 10, for at least one of detecting, identifying,diagnosing anomalies in and geolocating at least one device 2. Theinstant invention is illustrated and described in combination with anelectronic device 2, including but not limited to desktop computers,laptops, mobile communication devices, mobile computing devices,personal data assistants, workstations, tablets, pads and the likedevices. Term “electronic” is to be understood in this document as adevice that contains at least one electronic component giving offintended or unintended emissions.

The electronic device 2 is connectable to a network 3 by way of anetwork connection 4 originating from communication ports or physicalinterfaces of the device 2. The electronic device 2 can be connected tothe network 3 using a large number of technologies and approaches. Thus,the network connection 4 includes but is not limited to hard wiring,wireless, infrared and optical means.

The most common network 3 that may be utilized is the internet or theworldwide web though closed company networks, educational networks,non-profit networks or government networks and a myriad of othernetworks can be used.

The system 10 may also include such network 3, wherein the network 3 isone of an internet, an intranet, a Global System for Mobilecommunications, a Code Division Multiple Access, and a Time DivisionMultiple Access.

In a particular reference to FIG. 2, the instant invention contemplatesthat plurality of devices 2 are networked together, for example at amanufacturing facility. However, the embodiment of FIG. 2 is applicableto other environments, such as a company, educational institution,government organization, manufacturing line and the like where a numberof devices may be connected to a network 3. In this case the devices 2a-2 c may send similar information over a network 3 that may be closed(not connected to the outside world) or open (connected to the outsideworld). In this case the information can be used to detect devices 2 a-2c connected to the network 3 and provide status monitoring of thedevices 2.

The electronic device 2 transmits over such network connection 4 a setof parameters identifying the device 2 as well as other informationbased on interests or needs of the user of the electronic device 2,which is referred to in this document as intended information. Thisintended information includes but is not limited to Internet Protocol(IP) address, connection speeds, modem speeds, fonts, clock speeds,processor speeds, device types, hardware configurations, softwareconfigurations and in the case of wireless devices the frequency oftransmission of the device or computer that are intentionally sentacross cyberspace. Furthermore, there are specific sets of commandedinformation that can be sent such as passwords, status, softwareconfigurations, health of systems present and user identifiers of manykinds.

In addition to the intended information, there is significant unintendedinformation being inevitably transmitted over the network connection 4when the electronic device 2 is connected thereto.

In some cases the at least one device 2 may transmit it's physicallocation over the network directly or indirectly, but even if thatinformation is not transmitted directly, the identification and locationof the device that has transmitted the information over the network canbe found by reconstructing the characteristics of the device usingnetwork collected data to form an anticipated emissions signature thatcan be detected by the emission detection apparatus 20 described furtherin this document.

The electronic device 2, as is any physical electrical or electronicdevice that is powered, further generates and gives off intended andunintended emissions.

The intended emissions are related to specific operating transmission ofthe at least one device 2, while unintended emissions are inherentproducts of any operating electronic component or device.

Unintended emissions can also be prompted to be given off by electroniccomponents or devices by an illumination source 42, to be discussedfurther in this document, even when they are not operating.

The instant invention takes advantage of the fact that not only theseemissions can be detected, but the emissions are characteristicdepending on the make-up and configuration of the at least one device 2that is creating the emissions.

Components that give off emissions in an accidental or unintended mannerinclude but not limited to clocks, processors, microcontrollers, powersupplies, power converters, oscillators, resonators, integrated circuitsthat make up electrical and electronic devices. Characteristicinformation about these same components is also sent directly orindirectly in networked applications or cyberspace through the networkconnection 4.

Thus, the forgoing description will be focused on emission ofelectromagnetic energy and, more particularly, the emission ofelectromagnetic energy being in a Radio Frequency (RF) spectrum, whichis typically referred to in the art as frequencies below 300 GHZ,although sound and odor emissions to include ultrasonic and infrasonicemissions are also contemplated by the instant invention.

System 10 of the presently preferred embodiment contains three essentialelements.

The first essential element of the system 10 is a first means oremissions detection apparatus, generally designated as 20, which, inaccordance with a presently preferred embodiment, is provided for atleast one of sensing, processing, algorithmically matching, storing anddisplaying at least one emission of the electromagnetic energy for atleast one of detecting, identifying, diagnosing and geolocating the atleast the electronic device.

The second essential element of the system 10 is a second means ornetwork data collection apparatus, generally designated as 60, forcollecting a set of parameters transmitted through a network by at leastone device connectable thereto.

The third essential element of the system 10 is a third means, generallydesignated as 80, for at least one of generating and providing thenecessary signature, signature template, and associated parameters forat least one of detecting, identifying, diagnosing and geolocating theat least the device connectable to the network.

The first means 20 includes an antenna 22, an emission collection deviceor receiver 24 coupled to the antenna 22 and configured to output anemission signal.

The detailed description and operation of the emission collection deviceor receiver 24 are best shown and described in U.S. Pat. No. 7,515,094and in U.S. Pat. No. 8,063,813, both issued to Keller, III and in theU.S. patent application Ser. No. 12/551,635 filed on Sep. 1, 2009 andentitled “ADVANCE MANUFACTURING MONITORING AND DIAGNOSTIC TOOL”, U.S.patent application Ser. No. 13/106,412 filed on May 12, 2011 andentitled “METHOD AND APPARATUS FOR THE DIAGNOSIS AND PROGNOSIS OF ACTIVEIMPLANTS IN OR ATTACHED TO BIOLOGICAL HOSTS OR SYSTEMS” and in U.S.patent application Ser. No. 12/911,072 filed on Oct. 25, 2010 andentitled “IDENTIFICATION AND ANALYSIS OF SOURCE EMISSIONS THROUGHHARMONIC PHASE COMPARISON”, all owned by the assignee of the instantinvention and whose teachings are incorporated into this document byreference thereto. Thus, the detail description and operation of theemission collection device or receiver 24 is omitted herein for the sakeof brevity.

Briefly, in further reference to FIG. 3, the emission collection deviceor receiver 24 has at least one receiver channel and at least includes alow noise amplifier 34, a tuner 36, and an analog to digital converter38. Preferably, the emission collection device or receiver 24 isconfigured to sense the at least one emission through at least one wallof a structure though the emissions collection device can be used inopen air where no such wall exists.

The first means 20 may be operated in a passive mode wherein thereceiver 24 collects the radiated emissions from the at least one device2 or the first means 20 may be operated in active mode being adaptedwith an electromagnetic source 42 for illuminating the at least onedevice 2 so as to enhance emissions radiated thereof or cause theemissions to be given off. The electromagnetic source 42 could be anyelectromagnetic emitter known in the art, for example a narrowbandsource such as a klystron or magnetron or an adjustable widebandelectromagnetic emitter.

Thus, in passive mode a high sensitivity receiver 24 would search forelectronics devices 2 without illumination from an electromagneticsource 42. In active mode a high sensitivity receiver 24 would searchfor electronic devices with illumination from an electromagnetic source42. Detection can be enhanced by correlating the received emissions fromthe electronic device 2 in active and passive modes. Further correlationcan be achieved via positive feedback to the network collectionapparatus for both active and passive collection.

The receiver 24 may be operable in an automated manner. Preferably theautomatic operation of the receiver 24 is implemented through softwareexecuting a predetermined logic, but a hardware solution could also beimplemented. The automatic operation of the receiver 24 is the presentlypreferred embodiment the emissions detection apparatus 20. The emissionsdetection apparatus 20 may be also configured in an unattended sensoroperation mode capable of automatically detecting electronic devices 2in a wide variety of conditions to minimize the integration and trainingrequired of the users. The information collected is then communicated toother networked devices and either a central or distributed database.

Unintended radiated emission data from the at least one target device 2are measured and recorded over a range of operating modes, conditionsand environments to ensure the capture of all the signature variations.

At least the emissions detection apparatus 20 may be mounted on avehicle 32 being either stationary of movable. When a moving vehicle 32comes in proximity to the electronic device 2 of interest, the receiver24 measures the emissions and may be also configured to locate thephysical location of the at least one device 2 as well as otherelectronics in the vicinity of the device 2. The vehicle 32 may beeither ground engaging or operating in space, on a surface of a body ofwater or within the surface of the body of water. It is also to beunderstood that definition of the vehicle herein includes stationarystructures, such as a platform, a tower and the like structures andother structures, for example such as a robotic device.

First means 20 also includes means 26 for processing the emissionssignal that include a digital filter 40, means 44 for processing thesignal in a time domain and means 46 for processing the signal in afrequency domain independently from the means 44 for processing thesignal in the time domain. Each of these means 44, 46 for processing thesignal provide a methodology for determining different characteristicsof an emissions signature. When the time domain manifestation of theemission signal data and the frequency domain manifestation of theemission signal data are processed independently and then furtheralgorithms are applied to each respective data stream independentlysubstantial improvement in device detection, identification andgeolocation can be established. Further improvement still can be made byadding other transform domains that are advantageous for extraction ofdevice signature characteristics, such as Laplace transform andconvolution techniques.

The means 26 for processing the emission signal after collection isoperable to generate, for algorithm matching purposes, signaturecomponents of the at least one emission.

Means 26 may also include means 47 for reducing noise of the emissionsignal processed in the frequency domain 46.

In the presently preferred embodiment, the first means 20 additionallyinclude means 28 for matching the processed emission signal against atemplate 82 of emission signature(s) in accordance with a predeterminedlogic, although the instant invention contemplates that the means 28 maybe provided in combination with the template 82 within the third means80.

Means 28 includes at least one and preferably a plurality of time domainsignature matching algorithms 48. Thus, the means 44 for processing theemissions signal in the time domain is configured to prepare the signalfor characteristic extraction via the execution of a plurality of timedomain signature matching algorithms 48. The predetermined logicincludes at least two algorithms 48 operating in parallel to each other.The parallel operation of the at least two algorithms 48 is preferredfor computational speed, although serial operation is also contemplated.

Such predetermined logic may include at least two orthogonal algorithms.There is no limit to the number of algorithms that can be employed inparallel. Greater number of parallel algorithms that look at independentcharacteristic improve ability to locate, identify, diagnose andgeolocate the at least one device 2.

Orthogonal algorithms are defined as algorithms intended to processuncorrelated independent characteristics. Preferably, each of thealgorithms 48 operating in parallel to each other processes andindependent characteristic of the at least one device 2.

Means 28 also includes at least one and preferably a plurality offrequency domain signature matching algorithms 57. Thus, the means 46for processing the emissions signal in the frequency domain ispreferably configured to prepare the signal for characteristicextraction via the execution a plurality of frequency domain signaturematching algorithms 57. The predetermined logic includes at least twoalgorithms 57 operating in parallel to each other. Such predeterminedlogic may include at least two orthogonal algorithms. Preferably, eachof the algorithms 57 operating in parallel to each other processes andindependent characteristic of the at least one device 2.

Means 28 additionally includes means for weighting output of each of theleast two algorithms so as to enhance probability of detection of the atleast one device 2. The invention contemplates means 50 for weightingoutput of each of the least two algorithms 57 and an independent means52 for weighting output of each of the least two algorithms 48. Suchmeans 50, 52 includes at least one other algorithm.

Means 28 finally includes means for outputting a final score (value) 53of analyzed signature components of the emission collected by theemission collection device 24. The final scoring means 53 combines theweighting of means 50 and means 52 to derive a final score based on thearchitecture described. The invention also provides that thepredetermined logic includes at least one algorithm that operates basedon at least one of physically collected data and network constructeddata.

The final score is compared within means 28 against a threshold definedby a probability of a detection of the at least one device 2. Thus, thefinal score derived from at least one of the time domain processing, thefrequency domain processing, a plurality of time domain algorithms and aplurality of frequency domain algorithms is combined to enhance overallscoring for the detection, identification and geolocation ofelectronics.

The scoring uses advanced algorithms that assess how well each algorithmhas matched the signature template 82 and then how well the entire cadreof algorithms has matched the signature template 82 in aggregate. Asstated, each algorithm focuses on a different aspect or characteristicof the signature. Each device will also have different weightings toeach algorithm in the scoring so that it is possible to better match thestrongest criteria of any given device since some devices may notpresent some characteristics as strongly.

Final scoring 53 provides, as an output, a numerical score. Above acertain threshold, the numerical score defines detection or verificationthat is displayed or saved as applicable. The thresholds are defined bythe probability of detection that is admissible by a particularapplication or user.

Physically the algorithms 48, 52 are employed on FPGAs where speed andthroughput is critical or on DSP chips or power PC chips where it isbeneficial to have recursive matching algorithms. Where the mostdemanding recursive number crunching is needed, a dual core single boardcomputer is used.

Through the use of at least one of algorithms 48 and algorithms 52, thesystem 10 automatically matches processed spectral data derived from atleast one of collected emissions with predetermined emission signatureto a specific device 2 or a constructed template 82 from theconstruction of networked derived data to include the identification ofthe make or model of the device 2, thereby providing a mechanism todetect and identify such device 2. The receiver 24 is so designed thatits sensitivity is sufficient to detect emissions at a range from the atleast one device 2 and further over a broad geographical area or range.Through the use of additional algorithms dedicated to not only findingthe at least one device 2, but to locating it as well, the at least onedevice 2 can be further geolocated based on the intended or unintendedemissions that are given off.

Baseband demodulation, decimation, filtering, Fourier Transforms,Wavelet Transforms 47, Artificial Intelligence (AI), Artificial NeuralNetworks (ANN), detection and signal identification algorithms andreconfigurable hardware (FPGA) topologies implementing advancedprocessing are contemplated for use in the instant invention.

The first means 20 of the presently preferred embodiment also includes adata storage 30 that contains parameters from at least one device 2and/or from at least one other device 5 of interest that can be locatedin a vicinity of the at least one device 2.

The data storage can 30 at least one of store, display hierarchicallyand catalog an arbitrary number of devices 26.

The data storage 30 includes a library of signatures identifying the atleast one device 2 and at least one other device 5 and wherein thesignatures were generated from at least one of the first and secondmeans, 20 and 60 respectively.

As has been described above, the emission detection means 20 isconfigured to sense emissions from at least one other device 5 locatedin close proximity to the at least one device 2. Accordingly, theemission detection means 20 may further have means for identifying theat least one other device 5 that are either disposed within or externalthereto. For example, other devices 5 located in proximity to the atleast one device 2 may include televisions, refrigerators, ovens,dishwashers, washers, printers, monitors and the like devices employingelectronic components or sub-assemblies for their operation. As has beenestablished above, any electronic components or sub-assembly gives offintended and/or unintended emissions. Such emissions are then processedand analyzed to determine/define a collection of the other devices 5.This information may be valuable for example, to sales and marketingorganizations of such other devices 5 enabling them to stream apreselected information to the at least one device 2 connected to thenetwork 3 by way of the network confection 4, wherein the preselectedinformation is dependent on a type of the at least one other device 5identified by the system 10. The system 10 is also configured to enhanceinformation about a user of the at least one device 2 based on a type ofthe at least one other identified device 5.

As it has been further established above, the instant invention allowsthe at least one device 2 being a plurality of devices and wherein thefirst means 20 is configured to at least sense emissions from theplurality of devices 2. At least some of the plurality of devices may beconnected to the network 3 when the first means 20 is operable to sensethe emissions. The instant invention also contemplates that all of theplurality of devices were connected to the network 3 prior to the firstmeans 20 being operable to sense the radiated emissions.

The emission detection apparatus 20 may function without the activeautomatic detection mode or without the passive automatic detectionmode.

In further reference to FIG. 2, by way of an example only, the system 10is configured to detect a device or a component of the device employedin a manufacturing environment. Particularly, FIG. 2 illustrates amanufacturing devices 2 a-2 c, each having a connection to the network3. The system 10 of FIG. 2, may be also configured to include at leastone health monitoring device 54 and wherein the first means 20 isconfigured to interface with the at least one health monitoring deviceso as to enhance at least one of health monitoring and status monitoringof electronic devices 2 a-2 c. The system 10 may further be utilized tonot only utilize the network derived health monitoring informationtransmitted by the health monitoring device, but also measure using theemissions from the health monitoring device 54 to determine the state ofoperation and health of the health monitoring device itself. Thus, thesystem 10 is configured to perform diagnostics and/or is configured todetect a device 2 a, 2 b or 2 c that is at least one of beginning todisplay signs of degradation and show signs of imminent failure. Thesystem 10 of FIG. 2 may also be contemplated to include at least onebackup device 56 and wherein the first means 20 is configured tointerface with the at least one back up device 56 so as to facilitateprompt switchover of operation thereto. Advantageously, the devices 54and 56 may be also monitored by the system 10.

It is presently preferred that the first means or emission detectionapparatus 20 including the emission collection device 24, emissionsignal processing means 26, template matching algorithms 28 and datastorage and display 30 is provided as a turnkey apparatus.

Thus, in one embodiment, the emission detection apparatus 20 is amicrowave measurement device configured as a turnkey system. In stillanother embodiment, the emission detection apparatus 20 is a millimetermeasurement device configured as a turnkey system. In still anotherembodiment, the emission detection apparatus 20 is a measurement deviceoperating in the KHz range configured as a turnkey system. In stillanother embodiment, the emission detection apparatus 20 is an ultrasonicmeasurement device configured as a turnkey system. In still anotherembodiment, the emission detection apparatus 20 is an infrasonicmeasurement device configured as a turnkey system. In yet anotherembodiment, the emission detection apparatus 20 operates in a passiveautomated detection mode. In still yet another embodiment, the emissioncollection device 20 operates in a passive automated detection mode forthe detection of at least two devices. In still yet another embodiment,the emission detection apparatus 20 is used to perform diagnostics onany device that is connected to the network.

In another embodiment, the emission detection apparatus 20 is anunattended sensor. In yet still another embodiment, the emissioncollection device or receiver 20 is used to detect a device 2 through atleast one wall. In still another embodiment the emission collectiondevice 20 is used to detect a device 2 in a building through at leasttwo walls. In yet another embodiment, the emission detection apparatus20 is used to detect a computing device. In still another embodiment theemission detection apparatus 20 is used as a manufacturing screeningdevice to determine if components on a manufacturing line meet arequired specification. In still another embodiment, the emissioncollection device or receiver 20 is an RF emissions measurement devicethat operates in a passive automated detection mode. In yet anotherembodiment, the emission detection apparatus 20 operates in an activeautomated detection mode. In still another embodiment, the emissiondetection apparatus 20 operates in an automated detection mode and apassive automated detection mode with correlation between data collectedon the network and automated detection mode and the passive automateddetection mode. In yet another embodiment, the emission detectionapparatus 20 operates in an automated detection mode using the networkdata and physically collected data and a passive automated detectionmode that controls the physical receiver 20 with correlation between thenetwork detection mode and the passive automated detection mode fordetection of at least two targets. In still another embodiment, theemission detection apparatus 20 is a broadband frequency agile systemthat provides real time data back to the network such that the networkcan probe the device for additional data. In yet another embodiment, theemission measurement device uses information provided by the user of theelectronic device directly about the electronic device as opposed tothrough a network operation. In still another embodiment, the emissiondetection apparatus 20 is positioned on a vehicle 32 and quantifies andqualifies the electronics that reside on a physical space and furthergenerates a database of the location and physical attributes of thedevices. In still another embodiment the emission detection apparatus 20is integrated onto at least one of a small unmanned aerial vehicle orsmall robot. In still another embodiment the emission detectionapparatus is hand carried. In still another embodiment, the emissionmeasurement device is used to perform diagnostics. In yet anotherembodiment, the emission detection apparatus 20 is positioned on a firstplatform and continuously monitors the emissions; the network collectiondevice is positioned in a location where it can collect network data,the two are interfaced for at least one of real time detection,identification, location and diagnostics of electronic devices. In yetstill another embodiment, an electromagnetic source 42 is a tunablefrequency agile source integrated to create responses that are detectedon the network and by the emissions measurement device.

The second means 60 for collecting a set of parameters transmittedthrough a network 3 by at least one device 2 connectable thereto may bea well known computer, wherein the system 10 includes a connectionbetween the computer and the network and wherein the computer isconfigured to provide automated identification of the at least onedevice 2. There are various software and hardware options in the artthat can be used to collect information from devices that are connectedto the internet. The second means 60 may also include at least one of atleast one cookie 62, a digital fingerprinting 64 and a deep packetinspection 66, which are examples of software devices that operate onnetworks to collect information about network users. The second means 60may also include a predetermined logic configured to detect physicalcharacteristics of the at least one device 2 connected to the network 3by way of the network connection 4.

There are several identifying parameters that can be collected about theat least one device 2 that is attached to the network 3. For example,online device fingerprinting 64 has the ability to identify the onlinecharacteristics of such at least one device 2. Information that isroutinely gathered includes information that is related to the physicalcharacteristics of the device attached to the network. This informationmay include clock speeds, fonts used, processor information, modemspeeds, information packet protocols, usage of the user to includeactivities online such as sites visited, which form a pattern. Thesepatterns can be tracked online.

Finally, the third means 80 for at least one of developing, generating,storing and transmitting a signature template for at least one ofdetecting, identifying, diagnosing and geolocating the at least thedevice 2 connectable to the network 3 may include a pair of signatures,one of the pair of signatures defining the anticipated at least oneemission collected by the emission collection device 24 to detect aspecific target and based on the pair of signatures defining the set ofparameters obtained by the second means 60.

Now in reference to FIG. 4, the third means 80, in accordance with oneembodiment, includes a signature template 82 of the at least one device2. The third means 80 may also preferably include at least one of themeans to define the parameters necessary for a signature template 82,the means to generate a signature template 82, and the means to storethe signature template 82. The third means 80 uses at least one ofnetwork generated and physically collected information for thedevelopment of the signature template. The instant invention takesadvantage of the information sent over the network connection 4 aboutthe at least one device 2 connected to the network 3 in both intendedand unintended ways and the information provided can be used todetermine physical characteristics ultimately the network derivedinformation can be used to create templates that can be used in thephysical world to physically detect, identify and geolocate a devicethat is attached to a network 3 based solely on the information gatheredabout that device on the internet. Thus, the signature template 82includes at least some of the parameters from the set of parameterscollected from the network connection 4. In further reference to FIG. 4,the set of parameters includes at least one of a clock speed 68, aprocessor type 70, and a transmission frequency 72, and may furtherinclude power supply switching frequencies, a transmission speed ofdata, a microcontroller type, timing protocols of the at least onedevice, and a configuration of the at least one device.

More specifically, the signature template 82 includes the set ofparameter frequencies being superimposed onto a frequency spectrum ontop of one another so as to define an expected signature 84 of the atleast one emission to be detected in physical space. Thus, the signaturetemplate 82 includes at least one of single peak characteristics,multiple peak characteristics, harmonically correlated characteristics,non-harmonically correlated characteristics, time correlatedcharacteristics, phase correlated characteristics and duty cyclecharacteristics. Accordingly, the first means 20 includes at least oneof a peak detection algorithm, a multiple peak detection algorithm, aharmonic correlation algorithm, a non-harmonic correlation algorithm, atime correlation algorithm, a phase correlation algorithm, and a dutycycle timing correlation algorithm.

Using the information sent about these devices, components orsubcomponents over the network 3, the invention reconstructs theemissions characteristics expected from the at least one device 2.Useful information about the at least one device 2 that can be gatheredin cyberspace that directly or indirectly determines the specificationsof the device with regards to clocks, processors, power supplies, powerconverters, oscillators, resonators, integrated circuits is used toreconstruct parts of the unintended emission characteristics. With theemission detection apparatus 20 being so tuned in sensitivity so as tothen detect and identify the specific device, the collected emissionsare processed and matched to the expected reconstructed emissionsignature form the parameters transmitted through the network connection4. Where the information is tied to a specific device, then the specificdevice can be specifically detected, identified and geolocated.

Since network operations provide information about a device connected tothe network in both intended and unintended ways and the informationprovided can be used to determine physical characteristics, ultimatelythe network derived information is employed to create template 82 thenused in the physical world to physically detect, identify and geolocatea device that is attached to a network based solely on the informationgathered about that device on the internet.

The instant invention uses information to identify network users and isfurther used to indentify characteristics of the at least one device 2attached to the network 3 in the physical world. The invention generatesthe signature template 82 of the expected unintended or intendedemissions of the actual device for detection in physical threedimensional space by the emissions detection apparatus 20 so as tophysically detect, identify and geolocate the device of interest. Thekey is that the collected information forming the template 82, used toidentify the user in physical space, is collected using any networkcyberspace data collection or data mining technique.

The signature template 82 may include also data from indirect emissionmeasurement from the at least one device 2 and may be also derived fromfree field emission data of at least two devices that have beenpre-measured. It is also contemplated that only pre-measured emissionsdata is used to detect the at least one device 2 of interest.

The instant invention also contemplates that template matching algorithmmeans 28 employs the signature template 82 component of third means 80.

It is important to note here that the at least one device 2 can beconnected to the network 3 or was previously connected to the network 3during the time when the emission collection means 24 is operable tosense emissions.

Optionally the emission detection apparatus 20 may also be employed tocollect information about all other devices 5 in the neighborhood of orproximity to the at least one device 2 with resulting information to befed back into the database 30 so as to categorize the location of the atleast one device 2 by address and cross referencing it with otherdevices 5 detected at that location. This could also be implemented inthe reverse, wherein the emissions collection is used to thereafterspecifically collect information on the network 3 about the specificdevice that has been detected in the physical world.

In this embodiment the means 80 would create a signature template 82 fornetwork based algorithms for data expected to be collected via thenetwork.

It would be appreciated that the emission detection apparatus 20 and thenetwork data collection means 60 may be operable so as to provide realtime information exchange and positive feedback between one another.

In several embodiments multiple emission detection apparatuses 20 andnetwork data collection apparatuses 60 are networked together to achieveimproved results on several devices simultaneously. A set of receivers24 and electromagnetic sources 42 could be positioned together on oneplatform or each receiver 24 and each electromagnetic source 42 could belocated on separate platforms or any combination thereof and connectedto a network data collection apparatus 60 that monitors the network 3.For example, in further reference to FIG. 2, and in one presentlypreferred embodiment, high sensitivity receivers 24 are positioned inseveral locations around a manufacturing plant and a network datacollection apparatus 60 is installed onto the plant intranet network.This configuration allows the receivers 24 to monitor the situation froma distance sufficient not to disrupt plant operations while the networkdata collection apparatus 60 collects information from the network. Inanother embodiment, the emissions detection apparatus 20 is installedaround the plant and each system provides fully automated monitoringthat provides multiple processors working in parallel to improveperformance with each connected directly to the plant intranet networkThis is particularly beneficial when one of the electronic device 2 a, 2b or 2 c is degrading and sending out information via the unintendedemissions or the network that there is a problem with one or morecomponents of the system. The individual emissions detection apparatus20 can focus processing assets on identifying the problem from theunintended emissions signature without a need to limit continuousmonitoring of other plant assets. In this manner, the emission detectionapparatus 20 and the network data collection apparatus 60 work incombination with each other to prevent catastrophic problems on amanufacturing plant floor when one or more systems fail.

In another embodiment, the emissions detection apparatus 20 could bepositioned on mobile vehicles, such as ground vehicles, airbornevehicles or even space-borne vehicles to monitor areas of interest tomarketing companies, while a network based data collection apparatus 60may be physically located in a remote location. In the ground vehicleexample, a vehicle 32 could drive around specific neighborhoods seekingto detect and geolocate a specific networked user device 2. Once thedevice 2 is detected and identified, the receiver 24 and emissionssignal processing means 26 and algorithm matching means 28 are used toidentify other electronic devices 5 contained in the same building wherethe network connected device 2 is located. In this manner the system 10can provide enhanced marketing information to marketing organizationswho participate in that business. This embodiment further has theability to store all previously detected devices and device locations inthe database 30 such that a database of useable data is achieved. Otherusers who could benefit from this information other than marketingorganizations may also obviously benefit from this embodiment. Thedatabase 30 can be stored on-board the emissions detection apparatus orin an alternative embodiment may be stored in another location.

It would be appreciated that first and second means, 20 and 60respectively, are operable to independently identify operating state ofthe at least one device 2. However, it is contemplated that the system10 is configured to correlate measurements between network collecteddata and free field emission data for detection of the at least onedevice 2.

Regarding the physical arrangement of the system 10, the first means 20is positionable in a first location, wherein the at second means 60 islocated in a second location, wherein the third means 80 is located in athird location and wherein the first, second and third locations arebeing independent from each other. Instant invention also contemplatedthat first, second, and third means, 20, 60 and 80 respectively may bepositioned in the same location, with the second means 60 collecting setof parameters in a wireless manner.

Thus, in one embodiment of the invention, the emission detectionapparatus 20 includes a receiver 34 configured to detect at least oneelectronic device 2 by measuring at least one unintended RF emissiongiven off by the at least one electronic device 2 where the template 82is used as the signature template for the template matching algorithmsto identify the device was derived from information collected from thenetwork 3 the at least one device 2 is or was attached to.

In another embodiment, the system 10 may be also configured to verifysuppression of an electronic device.

In a further embodiment, the system 10 may be also employed to at leastone of detect and neutralize an improvised explosive device (IED),wherein the first means 20 includes is a tunable frequency agile source42 integrated onto a platform and configured with an to detect emissionsfrom electronic components employed within IED trigger mechanism.

In another embodiment, the emission detection apparatus 20 is used tolocate the at least one electronic device 2 that is giving off the atleast one unintended RF emission. In another embodiment, at least theemission collection device 24 is positioned on a vehicle 32. In yetanother embodiment, at least the emission collection device 24 ispositioned in a networked configuration inside a manufacturing facility.In another embodiment, at least the emission collection device 24 ispositioned on top of a tower. In still another embodiment, at least theemission collection device 24 is positioned on a vehicle 32 and theemission collection device 24 is in use while the vehicle 32 is inmotion. In another embodiment, at least the emission collection device24 is positioned on an aerial vehicle. In another embodiment, at leastthe emission collection device 24 is positioned on an object in space.In yet another embodiment at least the emission collection device 24 ispositioned on a robot. In still another embodiment at least the emissioncollection device 24 is positioned on an unmanned vehicle.

In another embodiment at least the emission detection apparatus 20 ispositioned on a vehicle. In yet another embodiment, at least theemission detection apparatus 20 is positioned in a networkedconfiguration inside a manufacturing facility. In another embodiment, atleast the emission detection apparatus 20 is positioned on top of atower. In still another embodiment, at least the emission detectionapparatus 20 is positioned on a vehicle and the emission detectionapparatus 20 is in use while the vehicle is in motion. In anotherembodiment, at least the emission detection apparatus 20 is positionedon an aerial vehicle. In another embodiment, at least the emissiondetection apparatus 20 is positioned on an object in space. In yetanother embodiment at least the emission detection apparatus 20 ispositioned on a robot. In still another embodiment at least the emissiondetection apparatus 20 is positioned on an unmanned vehicle.

In yet another embodiment, the emission detection apparatus 20 operatesin an active automated detection mode and a network detection mode and apassive automated detection mode with correlation between the activeautomated detection mode and a network detection mode and the passiveautomated detection mode for detection of at least two targets ordevices 2.

In yet another embodiment, the emission detection apparatus 20 is usedto detect and identify faulty equipment that is connected to a network3. In still another embodiment, the emission detection apparatus 20 isused to pinpoint geographically a number of users of an onlineapplication. In yet another embodiment, the emission detection apparatus20 uses a reconstructed signature template 82 that was derived fromother means other than network data collection. In yet anotherembodiment, the emission detection apparatus 20 uses a reconstructedsignature template 82 that was derived from means other than networkdata collection that is combined with network collected data to improvethe template 82. In still another embodiment, the emission detectionapparatus 20 operates automatically through software for the detectionof electronic devices. In yet another embodiment, the emission detectionapparatus 20 is used to prevent failure of manufacturing equipment. Instill another embodiment, the emission detection apparatus 20 is used toprevent anomalies in any corporate closed network. In yet anotherembodiment the emission detection apparatus 20 verifies that a device 2connected to the network 3 is functioning properly. In still anotherembodiment, the emission detection apparatus 20 is configured as aturnkey system.

In yet another embodiment the invention is a system comprising: areceiver 24, a network based apparatus 60 that collects informationabout a device using network based means, wherein the receiver 24 isconfigured to detect at least one electronic device by measuring atleast one unintended enhanced emission given off by the at least oneelectronic device and the template that is used by the emissionscollection device is constructed using information collected from thenetwork. In yet another embodiment, the invention is a system 10comprising: a receiver 24, a network based apparatus 60 that collectsinformation about a device using network based means, an electromagneticsource 42 for enhancing at least one RF emission signature, wherein thereceiver 24 is configured to detect at least one electronic device 2 bymeasuring at least one unintended enhanced RF emission given off by theat least one electronic device 2 and enhanced by the electromagneticsource 42, a template 82 used by the emissions detection apparatus 20that is constructed using information collected from the network 3. Instill another embodiment, the network data collection apparatus 60employed to collect the network data is software based. In still anotherembodiment, the network data collection apparatus 60 employed to collectthe network data is hardware based. In yet still another embodiment, thenetwork data collection apparatus 60 is digital fingerprinting. In stillanother embodiment the network data collection apparatus 60 is deeppacket inspection 66. In another embodiment, the network data collectionapparatus 60 is a program that resides on the device that is connectedto the network 3 that sends information about the device to be locatedto another program located elsewhere on the network 3. In yet anotherembodiment, a network of at least two emission collection devices 24 isused to enhance collection of the at least one device 2 that isconnected to the network 3. In yet another embodiment, a network of atleast two emissions collection devices 24 and at least two emissionssignal processors 26 are used to enhance the collection of at least onedevice 2 where each pair of emission collection devices 24 and emissionssignal processors are connected to at least one of a different algorithmor multiple algorithms that form a parallel in an array of algorithms57. In still another embodiment, at least two emission detectionapparatus 20 are networked together and are positioned in a manner thatthe device 2 of interest can be monitored and the emission measurementdetection apparatus 20 is also connected to the network 3. In yetanother embodiment, at least two emission detection apparatus 20 arenetworked together and are positioned on at least one of a vehicle, anarchitectural structure, or any combination thereof to identify thedevice of interest. In still another embodiment, the emission detectionapparatus 20 is used to detect devices that at one time were connectedto a network 3 inside a building. In yet another embodiment, theemission detection apparatus 20 is used to detect a component in afactory. In still another embodiment, the emission detection apparatus20 is used to create a database of targets found and the location oftargets found. In still another embodiment, emission detection apparatus20 provides a mechanism for storing at least one signature of targets ofinterest. In yet still another embodiment, the emission detectionapparatus 20 is used in a network to achieve the ability to detectelectronics over a broad geographical range. In yet another embodiment,the emission detection apparatus 20 provides a database of datacollected to make it useful for marketing purposes. In still anotherembodiment emission detection apparatus 20 operates automaticallythrough software for the detection of electronic devices. In yet anotherembodiment, the emission detection apparatus 20 uses one of a detectiontemplate constructed of information collected on a network 3 andinformation collected by direct inspection of the electronic device. Inyet another embodiment, the emission measurement device both a detectiontemplate constructed of information collected on a network andinformation collected by direct inspection of the electronic device toderive an improved template that is used to detect electronic devices.In still another embodiment, the emission detection apparatus 20 is usedto predict the failure characteristics of the device that is attached tothe network 3. In yet another embodiment, the electromagnetic source 42is employed to compliment a passive emissions detection system that usesnetwork derived data for signature or templates that are matched to theemissions collected. In yet another embodiment, the emission detectionapparatus 20 verifies information already accessed via networkcollection. In still another embodiment, the system 10 uses multipleorthogonal algorithms to detect and identify the target of interest. Inyet another embodiment, the system 10 creates the signature based oninput from the network data mining such as clock speeds, font, screensize, processor speed, web browsing information, power supply switchingspeeds and other data collected via the network about the networkeddevice.

In one application, the invention is employed to determine the health ofthe electronics that are connected to the network based on theinformation collected. For example, if a certain device 2 is expected tobe sending predetermined information over the network 3 and is insteadsending a faulty (deviating from such predetermined) information, suchfaulty device 2 is detected, located. Further diagnostics can becompleted on such device 2 so as to assure proper functioning andoperation thereof.

Further, the invention can be used with an active illumination means 42as a stimulus of electromagnetic signatures that unintentionally emitfrom electronics to stimulate the device 2 that is trying to be found.The network collection component of the invention can measure real-timethe changes to the cyber collected data to verify that the electronicdevice being physically stimulated is in fact the device that isconnected to the network that is of interest. The active AdvancedElectromagnetic Location of Electronic Devices (AELED) system is acomplete system comprised of sensitive passive detection and activeillumination that can be used as a subcomponent of the invention.

Emission signatures also provide valuable information regarding thepotential susceptibility and vulnerability of the systems toelectromagnetic (EM) energy at those frequencies. For instance if the atleast one device 2 that is connected to the network 3 is a mobile devicethat is sending erroneous data at the same time that another device 2that is connected to the network 3 is in operation in the near vicinityof the mobile device 2, the invention is used to physically locate themobile device 2 in the plant and the non-mobile device. By measuring theemission characteristics of both devices, the invention may be used asan Electromagnetic Interference (EMI) mitigation tool.

The introduction of EM field strengths at select frequencies where thedevice is measured to be emitting, suitable to cause failure,degradation or temporary disruption may amplify and/or alter theunintentional radiation characteristics of the device. Thecharacteristic signatures of a specific device may be easier to pick outof the noise. The signature changes might be leveraged in numerous ways.By combining information collected from the network this capability canbe improved dramatically.

The introduction of EM field strengths at select frequencies may amplifyand/or alter the unintentional radiation characteristics of the device.Damaged semiconductors, determined by breakdown characteristics, forinstance may radiate robustly and be able to be identified readily viaas a degrading part in a critical device that is connected to thenetwork. The characteristic signatures of a specific device may beeasier to pick out of the noise using these techniques. The signaturechanges might be leveraged in numerous ways. One advantage of theinstant invention includes amplification of the emission signature toimprove the ability to detect, identify and track the emitter.

The field strengths necessary to cause the described responses may nothave to be so robust. Lower field strengths in some cases may altercircuit function substantially. For example, oscillator instabilities atlow field strengths can significantly alter the emission signature ofsuch devices.

Now in reference to FIG. 5, the method of at least one of detecting,identifying, diagnosing and geolocating at least the device 2 connectedor connectable to a network 3 includes the step of providing an emissiondetection apparatus 20. Then, providing means 60 for collectinginformation or data transmitted by the at least one device 2 connectedor connectable to a network 3. Next, collecting, by the network datacollection means 60, information transmitted from the at least onedevice 2. Generating, based on the collected information, a signaturetemplate 82 of the at least one device 2. Next, sensing, with theemission detection apparatus 20, emission radiated from the at least onedevice 2. Then, processing the sensed radiated emission in accordancewith at least one predetermined algorithm. Next, comparing the processedradiated emission with the generated signature template. And, finally,at least one of detecting, identifying, diagnosing and geolocating theat least the device 2.

Now in reference to FIG. 6, the method of at least one of detecting,identifying, diagnosing and geolocating at least the device 2 connectedor connectable to a network 3 in an alternative form provides forgeneration of the signature template 82 without the use of the networkdata collection means 60. For example, such signature template 82 may begenerated by the manufacturer of the device 2 and stored within the datastorage 30 of the emission detection apparatus 20. Although, it is alsocontemplated that such signature template 82 has been stored within thestorage 30 of the emissions detection apparatus 20.

The information regarding the physical location of a specific devicethat is connected to the network 3 can be used for marketing purposesand for physically locating a user whom the network data collectionmeans 60 and the third means 80 identified as having certain habitsonline. For example, marketing information is enhanced when the onlineusers shopping habits can be identified and the physical location of theuser's networked electronic device can be physically located. Formarketing purposes it may be useful to identify the physical location ofthe user in a certain neighborhood or on a specific street in a certainneighborhood. This information can be fed back into cyberspace toidentify user's online habits. The invention can further be used to notonly identify a specific device 2 that is connected to a network 3, butthen using a database of household items identify the specific device 2and location of the device of interest as well as other electronicdevices owned by the same owner of the device that 2 is connected orconnectable to the network 3. In this way, a certain user may in usingthe network 3 yield information about his/her specific computer, mobilecomputing device or any networked device and once that device has beendetected, identified and geolocated the electronic devices that are inthe users household may be identified. For example, knowing the make andmodel of the television of the online user as well as his stereo, coffeemaker, automobile, DVD player, video game, mobile telephone as well ashis spouses items and any other items that may provide informationregarding his age, demographics, children, children's ages may providesignificant marketing information to companies that seek to sellproducts online or using traditional offline techniques such as directmailings or other targeted marketing techniques.

In geographical regions where background emissions are minimized, suchas rural or mountainous areas by a lack of electronics among a lessdense population, the invention may be used to locate users of a networkfor targeted marketing for products specific to less rural users.

In tight packed cities the identification of specific demographicswithin the obvious larger scale demographics collected by othertechniques may prove extremely valuable to certain targeted marketingorganizations.

Thus, the method of marketing includes the step of providing an emissiondetection apparatus 20. Then, providing means 60, such as network datacollection apparatus, for collecting information transmitted by the atleast one device 2 connected or connectable to a network 3. Next,collecting, by the information collecting means 60, informationtransmitted from the at least one device 2. Then, sensing, with theemission detection apparatus 20, emission radiated from the at least oneother device 5 located in a proximity to the at least one device 2.Identifying the at least one other device 5. And, finally, streaming tothe at least one device 2 an information preselected based onidentification of the at least one other device 5. The method ofmarketing may include additional step of storing all collectedinformation to a database.

For marketing purposes, the receivers 24 could be positioned on mobilevehicles 32, such as ground vehicles, airborne vehicles or evenspace-borne vehicles to monitor areas of interest to marketingcompanies, while a network based data collection apparatus 60 can bephysically located in a remote stationary location. In the groundvehicle example, a vehicle 32 could drive around specific neighborhoodsseeking to detect and geolocate a specific online user device whosesignature template 82 has been generated by the network data collectionapparatus 60. Once the device is detected and identified, the receiver24 and analysis capability can be used to identify other electronicscontained in the same building where the network connected device islocated. In this manner the system can provide enhanced marketinginformation to marketing organizations who participate in that business.This embodiment further has the ability to store all previously detecteddevices and device locations such that a database of useable data isachieved. Other users who could benefit from this information, otherthan marketing organizations, may also obviously benefit from thisembodiment. It would be appreciated that the receiver 24 is configuredto sense emissions through at least one wall of the building that thedevice 2 is located in.

The information regarding the physical location of a specific device 2that is connected to the network 3 may be also employed to detect,identify and geolocate unauthorized users of the network. By identifyingan unauthorized user by a mechanism via network captured data, the dataabout the unauthorized user can be used to form the template 82 that canbe used by the invention to detect, identify and geolocate theunauthorized user on the network. For example, an unauthorized user of anetwork 3 of the wireless type must send information about the device 2that is connected to the network 3 in order to access the wirelesssystem and then further send information about himself/herself, as theuser accesses different other sites, devices etc, on a broader network.The collection of the transmitted information provides significantinformation about the unauthorized user that can be used to create thetemplate 82 of the signature of the unauthorized device. The moststraightforward approach to identify the unauthorized user is by thetransmissions that the user is sending off, but since all users may bewirelessly connecting to the network 3 using the same frequency andprotocols it may be difficult to find the user using the intendedemissions only. However, by using the template 82 constructed so as todescribe both the intended and unintended emissions the unauthorizeduser is emitting and further employing the emission collection device 24either in a passive or active mode, the user can be physically locatedby the above described embodiments.

The above described embodiments are also advantageous in detecting atleast one of illegal activity and illegal device in accordance with amethod including the step of providing an emission detection apparatus.Then, providing means 60 for collecting information transmitted by adevice connected or connectable to a network. Next, collecting, by thenetwork data collection apparatus 60, information transmitted from thedevice. Generating a signature template of the device based on thecollected information. Next, sensing, with the emission detectionapparatus 20, emissions radiated from the at least one device 2 or atleast one other device 5 located in proximity to the at least one device2. Then, matching signature of sensed emissions with the generatedsignature template. Finally, geolocating, with the emission sensingapparatus at least one of the device and the at least one other device5.

By way of one example, the at least one device 2 may be a counterfeitedelectronic component or a counterfeited electronic device. By way ofanother example, the system 10 can detect network transmissions relatedto counterfeited currency activities and the emission collection device24 can be configured to detect odor of the ink normally used to printcounterfeited currency and/or intended or unintended electromagneticemissions from the apparatus employed in printing counterfeitedcurrency.

By way of another example, the system 10 can be employed at airports,train stations, marine port facilities, bus stations, court houses, andany other dwellings that incorporate stations for screening humansand/or goods so that spectral emission characteristics collected fromthe devices, equipment or goods undergoing screening are correlated withthe data and/or information characteristics collected over the networkin order to identify a user of the devices, equipment or good. In a morespecific example, if the network collection apparatus 60 generates thecorresponding signature template 82 of a specific mobile phonetransmitting information over the network connection 4, the emissiondetection apparatus 20 positioned at the screening station and havingsuch signature template 82 stored therewithin will be operable toimmediately identify the user of such mobile phone of interest.

It would be appreciated that this invention seeks to merge cyberspaceonline data collection with the ability to detect very weak emissionscharacteristics of electronic devices that can define the user of theinvention the location of a specific device whose information wascollected about online. It has been demonstrated that there aresignificant advantages to the analysis of both intended and unintendedemissions from electronic devices to garner information about theemitting equipment, the information processed by the equipment and thelocation of the equipment. All devices that allow a network user toaccess the network 3 utilize the electronic device 2 as a mechanism tointerface with the network 3.

Although the present invention has been shown in terms of the detection,identification and geolocation of the electronic device, it will beapparent to those skilled in the art, that the present invention may beapplied to detection, identification and geolocation of other devices orlocations emitting odor or smell or sound.

In one example, emission detection apparatus 20 may be configured todetect physical location emitting a specific odor or smell. In a moreparticular example, each narcotic substance is characterized by aspecific odor or smell. Thus, it is relatively easy and practical togenerate a library of odors or smells of interest as a plurality ofemission templates 82 or as a plurality of signatures within onetemplate 82. When emission of a specific odor or smell of interest isdetected, additional emission detection apparatus 20 may be employed fordetecting and identifying any electronic device located in a proximityto the location emitting this odor or smell. Then, the constructedemission signature may be employed by the network data collection means60 for collecting any information transmitted over the networkconnection 4. And finally, a plurality of emission collection means 24or a plurality of emission detection apparatuses 20 may be employed togeolocate exact coordinates of the location.

In another example, odor detecting apparatus may be positioned in a keylocation at a chemical or nuclear processing facility as a verificationof proper operation transmitted by various sensors usually employed insuch facilities. At the same time emission collection means 24 oremission detection apparatuses 20 configured to sense electromagneticenergy can be employed for verifying proper operation of the sensorsthemselves.

In similar applications, the instant invention may be employed fordetecting, geolocating and verifying emission of a sound. For example,proper operation of an audible alarm may be monitored by the instantinvention.

Furthermore, the template 82 may be constructed from datacharacteristics collected by the emission collection 24 and processed bythe emission signal processing means 26. In this embodiment, the secondmeans 60 would be configured to employ template matching means 28 so asto compare the characteristics of the parameters transmitted through thenetwork connection 4.

While a presently preferred and various alternative embodiments of thepresent invention have been described in sufficient detail above toenable a person skilled in the relevant art to make and use the same itshould be obvious that various other adaptations and modifications canbe envisioned by those persons skilled in such art without departingfrom either the spirit of the invention or the scope of the appendedclaims.

I claim:
 1. An emissions detection apparatus for at least one ofdetecting, identifying, diagnosing and geolocating an electronic deviceor an information transmitted from the electronic device, said emissionsdetection apparatus comprising: (a) an emissions collections deviceconnected to an antenna receiving emission of an electromagnetic energyemitted from the electronic device, said emissions collections devicecollects a spectral data emitted from the electronic device and receivedat the antenna; (b) one or more algorithms processing said collectedspectral data, said one or more algorithms selected from a groupconsisting of a peak detection algorithm, a multiple peak detectionalgorithm, a harmonic correlation algorithm, a non-harmonic correlationalgorithm, a time correlation algorithm, a phase correlation algorithm,and a duty cycle timing correlation algorithm; and (c) one or morealgorithms matching said processed spectral data to an emissionstemplate, wherein a match of said processed spectral data with theemissions template at least one of detects, identifies, diagnoses andgeolocates the electronic device or the information transmitted from theelectronic device.
 2. The emissions detection apparatus of claim 1,wherein said processed spectral data includes a processed emissionsignal and wherein the emissions template includes at least one emissionsignature.
 3. The emissions detection apparatus of claim 2, wherein saidemissions template is constructed from information collected from anetwork.
 4. The emissions detection apparatus of claim 1, wherein saidone or more algorithms matching said processed spectral data to theemissions template includes at least one of: (a) a basebanddemodulation; (b) decimation; (c) filtering; (d) Fourier Transforms; (e)Wavelet Transforms; (f) Artificial Intelligence (AI); (g) ArtificialNeural Networks (ANN); (h) detection and signal identificationalgorithms; (i) reconfigurable hardware (FPGA) topologies; (j) a Laplacetransform; and (k) a convolution technique.
 5. The emissions detectionapparatus of claim 1, further comprising the emissions template, whereinthe emissions template includes at least one of: (a) single peakcharacteristics; (b) multiple peak characteristics; (c) harmonicallycorrelated characteristics; (d) non-harmonically correlatedcharacteristics; (e) time correlated characteristics; (f) phasecorrelated characteristics; and (g) duty cycle characteristics.
 6. Theemissions detection apparatus of claim 1, wherein the electronic deviceis connected or being previously connected to a network, wherein theelectronic device transmits or previously transmitted a set ofparameters through the network, and wherein said set of parametersincludes at least one of: (a) a clock; (b) a processor type; (c) atransmission frequency; (d) power supply switching frequencies; (e) atransmission speed of data; and (f) a microcontroller type.
 7. Theemissions detection apparatus of claim 1, wherein the electronic deviceis connected or being previously connected to a network, wherein theelectronic device transmits or previously transmitted a set ofparameters through the network, and wherein said set of parametersincludes at least one of: (a) an Internet Protocol (IP) address; (b)connection speeds; (c) modem speeds; (d) fonts; (e) clock speeds; (f)processor speeds; (g) a hardware configuration; (h) a softwareconfiguration; (i) passwords; and (j) a web browsing information.
 8. Theemissions detection apparatus of claim 1, wherein the electronic deviceincludes at least one electronic component giving off intended orunintended emissions said at least one component is selected from agroup consisting of clocks, processors, microcontrollers, powersupplies, power converters, oscillators, resonators and integratedcircuits.
 9. The emissions detection apparatus of claim 1, wherein theelectronic device is connected or was previously connected to a networkand wherein said emissions detection apparatus predicts, detects orprevents anomalies in the network and/or monitors status of the network.10. The emissions detection apparatus of claim 1, wherein said emissionsdetection apparatus predicts health of the electronic device and/or acomponent thereof.
 11. The emissions detection apparatus of claim 1,wherein the electronic device is a faulty device or a device thattransmits a faulty information.
 12. The emissions detection apparatus ofclaim 1, wherein the electronic device is a counterfeited electronicdevice and wherein said emissions detection apparatus at least one ofdetects, identifies, diagnoses and geolocates the counterfeitedelectronic device.
 13. The emissions detection apparatus of claim 1,wherein said emissions detection apparatus is configured to detectconfigurations of the electronic device
 14. The emissions detectionapparatus of claim 1, wherein said emissions detection apparatus isconfigured to detect configurations of the electronic device and/orverify that the electronic device connected to the network isfunctioning properly.
 15. The emissions detection apparatus of claim 1,wherein said emissions detection apparatus is configured to at least oneof detect faulty information and diagnose problems with electronic partsthat are part of circuits contained in subcomponents of the electronicdevice connected or connectable to a network.
 16. An emissions detectionapparatus for at least one of detecting, identifying, diagnosing andgeolocating an electronic device or an information transmitted from theelectronic device, said emissions detection apparatus comprising: (a) anemissions collections device connected to an antenna receiving anemission of an electromagnetic energy emitted from the electronicdevice, said emissions collections device collects a spectral dataemitted from the electronic device and received at the antenna, saidemission collection device including at least a low noise amplifier anda tuner; (b) one or more algorithms processing said collected spectraldata, said one or more algorithms selected from a group consisting of apeak detection algorithm, a multiple peak detection algorithm, aharmonic correlation algorithm, a non-harmonic correlation algorithm, atime correlation algorithm, a phase correlation algorithm, and a dutycycle timing correlation algorithm; (c) one or more algorithms matchingsaid processed spectral data to an emissions template, wherein a matchof said processed spectral data with the emissions template at least oneof detects, identifies, diagnoses and geolocates the electronic deviceor the information transmitted from the electronic device.
 17. Theemissions detection apparatus of claim 16, wherein the emissionstemplate includes a set of parameters collected from a network andsuperimposed onto a frequency spectrum, said set of parameters definingan expected emission signature of the emission of the electromagneticenergy.
 18. A method for at least one of detecting, identifying,diagnosing and geolocating an electronic device, said method comprisingthe steps of: (a) collecting at least one emission radiated from saidelectronic device; (b) processing, in a frequency and time domains withat least one of a peak detection algorithm, a multiple peak detectionalgorithm, a harmonic correlation algorithm, a non-harmonic correlationalgorithm, a time correlation algorithm, a phase correlation algorithm,and a duty cycle timing correlation algorithm, said radiated emission toextract a signature of said electronic device; (c) matching saidsignature of said radiated emission with an emissions template; and (d)at least one of detecting, identifying, diagnosing and geolocating saidelectronic device based on a match of said signature with said emissionstemplate.
 19. The method of claim 18, further comprising the step ofconstructing said emissions template from a set or parameterstransmitted by said electronic device through a network.
 20. The methodof claim 19, further comprising the step of superimposing said set ofparameters collected from said network onto a frequency spectrum of saidradiated emission, said set of parameters defining an expected signatureof said radiated emission.
 21. The method of claim 18, furthercomprising the step of constructing said emissions template frominformation collected in a cyberspace.